CVE-2026-75413

DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath...

PT-2026-82305

DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath...

CVE-2026-75413

DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath...

CVE-2026-75413: Files or Directories Accessible to External Parties

DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath...

CVE-2026-75413

DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath...

EUVD-2026-66749

DocSys V2.02.80 is vulnerable to Any File Download. An attacker does not need to go through authentication to utilize the downloadDocEx.do interface and download any file via the parameter targetPath...

CVE-2026-75413

DocSys V2.02.80 is vulnerable to an Any File Download flaw. An unauthenticated attacker can utilize the downloadDocEx.do interface to download any file by manipulating the targetPath parameter. This vulnerability allows for unauthorized access to files or directories. No specific remediation, exp...

CVE-2026-4220

CVE-2026-4220 affects Technologies Integrated Management Platform 7.17.0, with the flaw located in SetWebpagePic.jsp. The issue arises from manipulation of the targetPath/Suffix argument, resulting in unrestricted upload. The vulnerability is exploitable over a network with no user interaction, a...

PT-2026-25619

A vulnerability has been found in Technologies Integrated Management Platform 7.17.0. Affected by this issue is some unknown functionality of the file /SetWebpagePic.jsp. The manipulation of the argument targetPath/Suffix leads to unrestricted upload. The attack may be initiated remotely. The...

ZenTao Pro 8.8.2 Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ZenTao Pro 8.8.2 Remote Code Execution', 'Description' = %q This module exploits a command injection vulnerability in ZenTao Pro 8.8.2 and earlie...